Collaborate Disseminate
Two bugs, now patched except in older versions, could be chained to allow attackers to hijack Zimbra server by simply sending a malicious email. Continue reading Zimbra Server Bugs Could Lead to Email Plundering
The unpatched flaws include RCE and authenticated privilege escalation on the client-side: Just the latest woe for the ransomware-walloped MSP. Continue reading Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers
Sprechen Sie Rust? Polyglot malware authors are increasingly using obscure programming languages to evade detection.
Continue reading Malware Makers Using ‘Exotic’ Programming Languages
The software-engineering platform is urging users to patch the critical flaw ASAP. Continue reading Critical Jira Flaw in Atlassian Could Lead to RCE
Update now: The ream of bugs includes some remotely exploitable code execution flaws. Still to come: a fix for what makes iPhones easy prey for Pegasus spyware. Continue reading Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day
In another vast software supply-chain attack, the password-stealer is filching credentials from Chrome on Windows systems via ChromePass. Continue reading NPM Package Steals Passwords via Chrome’s Account-Recovery Tool
Cheap, easy & prolific, the new version of the old FormBook form-stealer and keylogger has added Mac users to its hit list, and it’s selling like hotcakes. Continue reading MacOS Being Picked Apart by $49 XLoader Data Stealer
Deep-pocketed clients’ customers & suppliers could be in the attacker’s net, with potential PII exposure from an A-list clientele such as Apple, Boeing and IBM. Continue reading Law Firm to the Fortune 500 Breached with Ransomware
Podcast: Nothing, says a ransomware negotiator who has tips on staying out of the sad subset of victims left in the lurch, mid-negotiation, after REvil’s servers went up in smoke. Continue reading What’s Next for REvil’s Victims?
Can a new SIM card and prepaid service from an MVNO help? Former spyware insider, current mobile white hat hacker Adam Weinberg on how to block spyware attacks. Continue reading Protecting Phones From Pegasus-Like Spyware Attacks